We take steps to keep your Personal Data accurate and up to date. If you reside in the European Economic Area, you have certain rights to the Personal Data that we have collected about you. To exercise your rights to your Personal Data, please contact us through our Support Team or at the address listed below. Subject to applicable law and in exceptional circumstances only, we may charge for this service and we will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. 

You have the following rights: 

Right of access to your Personal Data (Article 15 GDPR): You have the right to ask us for confirmation on whether we are processing your Personal Data, and access to the Personal Data and related information on that processing (e.g., the purposes of the processing, or the categories of Personal Data involved). 

Right to correction (Article 16 GDPR): You have the right to have your Personal Data corrected, as permitted by law. 

Right to erasure (Article 17 GDPR): You have the right to ask us to delete your Personal Data, as permitted by law. This right may be exercised among other things: (i) when your Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed; (ii) when you withdraw consent on which processing is based according to Article 6 (1) (a) or Article 9 (2) (a) GDPR and where there is no other legal ground for processing; (iii) when you object to processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or when you object to the processing pursuant to Article 21 (2) GDPR; or, (iv) when your Personal Data has been unlawfully processed. 

Right to restriction of processing (Article 18 GDPR): You have the right to request the limiting of our processing under limited circumstances, including: when the accuracy of your Personal Data is contested; when the processing is unlawful and you oppose the erasure of your Personal Data and request the restriction of the use of your Personal Data instead; or when you have objected to processing pursuant to Article 21 (1) GDPR pending the verification whether the legitimate grounds of One Step At A Time override your grounds. 

Right to data portability (Article 20 GDPR): You have the right to receive the Personal Data that you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that information to another controller, including to have it transmitted directly, where technically feasible. 

Right to object (Article 21 GDPR): You have the right to object to our processing of your Personal Data, as permitted by law. This right is limited to processing based on Article 6 (1) (e) or (f) GDPR, and includes profiling based on those provisions, and processing for direct marketing purposes. After which, we will no longer process your Personal Data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. 

LEGAL BASIS FOR PROCESSING 

In this section we provide information on the legal basis for our processing of your Personal Data as required by Article 13 and 14 of the GDPR:  

• When you interact with us, such processing is necessary for the performance of our Services, Article 6 (1) (b) GDPR. 
• For non-sensitive Personal Data which we need in order to perform the Services, such processing is necessary for the performance of our Services, Article 6 (1) (b) GDPR. With regard to other non-sensitive Personal Data, we process such data on the basis of our legitimate interest, Article 6 (1) (f) GDPR, and our legitimate interest is to enhance our Services. 

CHILDREN UNDER 16 

We do not knowingly collect Personal Data online from children under 16. If you become aware that a child has provided us with Personal Data without parental consent, please contact us. If we become aware that a child under 16 has provided us with Personal Data without parental consent, we will take steps to remove the data and cancel the child’s account. 

DATA SHARING 

One Step At A Time use the data we collect to operate our business.  

Personal information collected during sign-up may be used to personalise our advertising and marketing activities, support our analysis and communicate with you and respond to your requests. We do not sell, trade or otherwise transfer any personal information to third parties without your permission.  

GOVERNING LAW 

We are a company based in England, UK. These terms and conditions are governed by and shall be construed in accordance with the laws of England. The parties to these terms submit to the exclusive jurisdiction of the courts of England. Furthermore, any action to enforce these terms and conditions shall be brought in the Courts of England. You hereby agree to personal jurisdiction by such courts, and waive any jurisdictional, venue, or inconvenient forum objections to such courts. 

INDEMNIFICATION 

You agree to indemnify One Step At A Time, its contractors, licensors, partners, clients and supporters and their respective directors, officers, employees and agents from and against any and all claims and expenses, including attorneys fees. 

CHANGES TO TERMS AND CONDITIONS 

We reserve the right to change the Terms and Conditions and Privacy Policy without notice. You acknowledge and agree that it is your responsibility to review the Terms and Conditions and Privacy Policy periodically to familiarise yourself with any modifications. Your continued use of the Services after such modifications will constitute acknowledgement and agreement of the modified Terms and Conditions and the Privacy Policy.